Author: jmm-guest
Date: 2007-02-04 19:35:38 +0100 (Sun, 04 Feb 2007)
New Revision: 5408
Modified:
data/CVE/list
Log:
mpg123 unimportant
flash issue windows-only
added unstable entry for elog
bbclone fixed
Modified: data/CVE/list
==================================================================---
data/CVE/list 2007-02-04 15:58:18 UTC (rev 5407)
+++ data/CVE/list 2007-02-04 18:35:38 UTC (rev 5408)
@@ -225,7 +225,9 @@
CVE-2007-0579 (Unspecified vulnerability in the calendar component in Horde
Groupware ...)
NOT-FOR-US: Horde Groupware
CVE-2007-0578 (The http_open function in httpget.c in mpg123 before 0.64 allows
...)
- - mpg123 <unfixed> (bug #409296; low)
+ - mpg123 <unfixed> (bug #409296; unimportant)
+ NOTE: Not much of a security problem; user will abort mpg123 and never listen
to
+ NOTE: the faulty stream again
CVE-2007-0577 (PHP remote file inclusion vulnerability in function.inc.php in
...)
NOT-FOR-US: ACGVclick
CVE-2007-0576 (PHP remote file inclusion vulnerability in xt_counter.php in
Xt-Stats ...)
@@ -470,7 +472,7 @@
CVE-2004-2676 (The Spy Sweeper Enterprise Client (SpySweeperTray.exe) in
WebRoot Spy ...)
NOT-FOR-US: WebRoot Spy Sweeper
CVE-2007-0508 (PHP remote file inclusion vulnerability in lib/selectlang.php in
...)
- - bbclone <unfixed> (bug #408839; medium)
+ - bbclone 0.4.6-8 (bug #408839; medium)
CVE-2007-XXXX [hinfo code injection]
- hinfo 1.02-3.1 (bug #402316)
CVE-2007-0494 (ISC BIND 9.0.x, 9.1.x, 9.2.0 up to 9.2.7, 9.3.0 up to 9.3.3,
9.4.0a1 ...)
@@ -1779,7 +1781,7 @@
CVE-2006-6828 (Multiple SQL injection vulnerabilities in Efkan Forum 1.0 and
earlier ...)
NOT-FOR-US: Efkan Forum
CVE-2006-6827 (Flash8b.ocx in Macromedia Flash 8 allows remote attackers to
cause a ...)
- TODO: check
+ - flashplugin-nonfree <not-affected> (Windows-specific)
CVE-2006-6826 (Unspecified vulnerability in the tab editor for Personal .NET
Portal ...)
NOT-FOR-US: Personal .NET Portal
CVE-2006-6825 (Calendar MX BASIC 1.0.2 and earlier store sensitive information
under ...)
@@ -2999,7 +3001,7 @@
RESERVED
CVE-2006-6318 (The show_elog_list function in elogd.c in elog 2.6.2 and earlier
...)
{DSA-1242-1}
- TODO: check
+ - elog 2.6.2+r1754-1
CVE-2006-6317
RESERVED
CVE-2006-6316
@@ -12574,9 +12576,9 @@
CVE-2006-2078 (Multiple unspecified vulnerabilities in multiple FITELnet
products, ...)
NOT-FOR-US: FITELnet
CVE-2006-2077 (Buffer overflow in Paul Rombouts pdnsd before 1.2.4 has unknown
impact ...)
- - pdnsd 1.2.4par-0.1 (bug #368268; high)
+ - pdnsd 1.2.4par-0.1 (bug #368268; medium)
CVE-2006-2076 (Memory leak in Paul Rombouts pdnsd before 1.2.4 allows remote
...)
- - pdnsd 1.2.4par-0.1 (bug #368268; high)
+ - pdnsd 1.2.4par-0.1 (bug #368268; medium)
CVE-2006-2075 (Unspecified vulnerability in MyDNS 1.1.0 allows remote attackers
to ...)
[sarge] - mydns 1.0.0-4sarge1
- mydns 1.1.0+pre-3 (medium; bug #348826)